Joomla Weblinks Shell Upload

Exploit Title : Joomla comweblinks Shell Upload Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : allinurl:/index.php?option ename jformdescription asset=comweblinks Software link : http://extensions.joomla.org/extensions/extension/official-extensions/weblinks Tested on:...

Joomla! 'com_weblinks' Component 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Joomla! 2.5.x < 2.5.16 / 3.x < 3.1.6 Multiple XSS

According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.16 or 3.x prior to 3.1.6. It is, therefore, affected by multiple cross-site XSS scripting vulnerabilities, related to the comcontact, comweblinks, and comnewsfeeds...

[20131102] Core XSS Vulnerability

Inadequate filtering leads to XSS vulnerability in comcontact, comweblinks, comnewsfeeds...

CVE-2010-4166: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via 1 the filterorder parameter in a comweblinks category action to index.php, 2 the filterorderDir parameter in a comweblinks category action to index.php, or 3 the...

CVE-2010-3712: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Joomla! 1.5.x before 1.5.21 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities," as demonstrated by the query string to index.php in the comweblinks or comcontent componen...

Joomla Component com_weblinks SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component comweblinks SQL Injection Vulnerability ========================================================= Author: ViRuS Qalaa Email: email protected My Sites :...

CVE-2010-2679

The vulnerability CVE-2010-2679 affects the Joomla! WebLinks extension (com_weblinks). It is a SQL injection flaw that can be triggered by the id parameter in the view action of index.php, allowing remote attackers to execute arbitrary SQL commands. The issue is documented with a high-severity CV...

Joomla Component com_weblinks Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Joomla Component comweblinks Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.com/index.php?option=comweblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5 Discoverd By: Pouya Daneshmand Website: http://Pouya.securitylab.ir...

Joomla! Component com_weblinks - id SQL Injection

Joomla! Component comweblinks - id SQL Injection source: https://www.securityfocus.com/bid/39032/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

CVE-2008-6299: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via 1 the title and description parameters to the comweblinks module and 2 unspecified vectors in the comcontent module...

[20081102] - Core - com_weblinks XSS vulnerability

comweblinks allows raw HTML into the title and description tags for weblink submissions from both the administrator and site submission forms...

CVE-2007-0387: Undefined Security Weakness

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...